Security Risk Assessment Checklist
This security risk assessment checklist applies ASIS International General Security Risk Assessment (GSRA) Standard, ISO 31000:2018 Risk Management Framework, NIST SP 800-30 Rev 1 Risk Assessment Guide, and DHS Critical Infrastructure risk methodology. Designed for security consultants and managers conducting formal site risk assessments.
- Industry: Security Services
- Frequency: Annually
- Estimated Time: 90-180 minutes
- Role: Security Consultant / Physical Security Manager / CPP
- Total Items: 13
- Compliance: ASIS International General Security Risk Assessment Standard (GSRA), ISO 31000:2018 Risk Management Framework, NIST SP 800-30 Rev 1 Guide for Conducting Risk Assessments, DHS Critical Infrastructure Security Risk Methodology, ASIS CPP (Certified Protection Professional) Standards
Asset Identification and Criticality
Critical asset inventory and business impact ranking.
- All critical assets inventoried (people, property, information, operations)?
- Assets ranked by criticality using impact matrix (High/Medium/Low)?
- Crown jewel assets (loss = catastrophic impact) specifically identified?
- Asset dependencies and interdependencies documented?
Threat and Vulnerability Analysis
Threat identification, likelihood scoring, and vulnerability gaps.
- Threat categories identified (criminal, terrorism, natural, insider, cyber)?
- Threat likelihood scored using historical data and local intelligence?
- Physical and procedural vulnerabilities identified for each critical asset?
- Risk matrix completed (Threat Likelihood x Asset Criticality = Risk Score)?
Countermeasures and Residual Risk
Existing controls evaluation and residual risk acceptance.
- Existing security controls evaluated for effectiveness against identified threats?
- Control gaps prioritized by risk score for remediation?
- Residual risk formally accepted by senior management with signatures?
- Written risk assessment report delivered to organization leadership?
- Risk Assessment Notes and Priority Recommendations
Related Quality Assurance Checklists
- CCTV Compliance and Privacy Audit Checklist
- False Alarm Reduction Program Audit Checklist
- Executive Protection Threat Intelligence Assessment Checklist
- Post-Event Security Debrief and After-Action Report Checklist
- Employee Theft Investigation Checklist
- CCTV Footage Review and Evidence Export Checklist
- Vendor and Supplier Fraud Detection Checklist
- Corporate Internal Investigation Protocol Checklist
Related Compliance Checklists
- Security Officer Performance Evaluation Checklist - FREE Download
- CCTV Compliance and Privacy Audit Checklist - FREE Download
- False Alarm Reduction Program Audit Checklist - FREE Download
- Executive Protection Threat Intelligence Assessment Checklist - FREE Download
- Post-Event Security Debrief and After-Action Report Checklist - FREE Download
- Employee Theft Investigation Checklist - FREE Download
- CCTV Footage Review and Evidence Export Checklist - FREE Download
- Vendor and Supplier Fraud Detection Checklist - FREE Download
- Corporate Internal Investigation Protocol Checklist - FREE Download
- Corporate Security Program Annual Review Checklist - FREE Download
Why Use This Security Risk Assessment Checklist?
This security risk assessment checklist helps security services teams maintain compliance and operational excellence. Designed for security consultant / physical security manager / cpp professionals, this checklist covers 13 critical inspection points across 3 sections. Recommended frequency: annually.
Ensures compliance with ASIS International General Security Risk Assessment Standard (GSRA), ISO 31000:2018 Risk Management Framework, NIST SP 800-30 Rev 1 Guide for Conducting Risk Assessments, DHS Critical Infrastructure Security Risk Methodology, ASIS CPP (Certified Protection Professional) Standards. Regulatory-aligned for audit readiness and inspection documentation.
Frequently Asked Questions
What is a Security Risk Assessment Checklist?
A Security Risk Assessment Checklist is a standardized inspection form used by security consultant / physical security manager / cpp to ensure consistent security services operations. It contains 17 inspection points organized into 3 sections. FREE security risk assessment checklist PDF. Asset criticality ranking, threat analysis, vulnerability scoring, risk matrix completion, countermeasure evaluation, and residual risk acceptance per ASIS International General Security Risk Assessment Standard (GSRA) and ISO 31000. 34+ risk assessment checks. Download FREE template now.
How often should I use this security services checklist?
This checklist is designed to be completed annually. Regular use ensures compliance with ASIS International General Security Risk Assessment Standard (GSRA) and ISO 31000:2018 Risk Management Framework and helps identify issues before they become problems.
Can I download this Security Risk Assessment Checklist as a PDF?
Yes, you can download this checklist as a FREE PDF for printing or offline use. The checklist includes 17 fields across 3 sections and typically takes 90-180 minutes to complete.
What compliance standards does this checklist cover?
This checklist helps ensure compliance with ASIS International General Security Risk Assessment Standard (GSRA), ISO 31000:2018 Risk Management Framework, NIST SP 800-30 Rev 1 Guide for Conducting Risk Assessments, DHS Critical Infrastructure Security Risk Methodology, ASIS CPP (Certified Protection Professional) Standards. Following these standards protects your organization and ensures best practices.
How do I complete this security services inspection checklist?
Begin by completing the header fields for Organization / Site Name, Assessment Date, Lead Assessor Name and Credentials, and Assessment Scope. Work through each of the 3 sections, marking items Yes or No as applicable. Add notes for any issues found. The entire process takes approximately 90 to 180 minutes.
What are the key sections in this security services checklist?
This security services checklist is organized into 3 key sections: Asset Identification and Criticality, Threat and Vulnerability Analysis, Countermeasures and Residual Risk. Each section contains specific inspection points that security consultant / physical security manager / cpp must verify. The structured layout ensures nothing is missed during security services inspections and makes the process efficient, typically taking 90-180 minutes to complete.
Who should use this Security Risk Assessment Checklist?
This checklist is primarily designed for security consultant / physical security manager / cpp working in security services operations. However, it is also valuable for quality assurance teams, safety officers, compliance managers, and supervisors who need to verify that security services standards are being met. Organizations of all sizes can benefit from using this Security Risk Assessment Checklist to maintain consistency and accountability.